Repository navigation

Static Analysis Gate

fix: the Hypatia gate could never fire — the defects that made it unconditionally vacuous #66

Sign in to view logs

Triggered via pull request September 3, 2026 03:43

opened #31

fix/hypatia-gate-repair

Status Failure

Total duration 11m 54s

Artifacts 4

static-analysis-gate.yml

on: pull_request

panic-attack assail

Hypatia neurosymbolic scan

Patch Bridge CVE triage

Deposit findings for gitbot-fleet

Annotations

12 errors, 10 warnings, and 2 notices

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 15 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: lith-http/k8s/base/secret.yaml.template#L29

[hypatia] Secret found: Generic secret

Hypatia neurosymbolic scan: ffi/zig/src/bridge.zig#L1

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704)

Hypatia neurosymbolic scan: core-zig/src/bridge.zig#L1

[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704)

Hypatia neurosymbolic scan: core-zig/src/bridge.zig#L1

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704)

Hypatia neurosymbolic scan: beam/native/src/beam.zig#L1

[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)

Hypatia neurosymbolic scan: beam/native/src/beam.zig#L1

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)

Hypatia neurosymbolic scan: beam/native/src/lith_nif.zig#L1

[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704)

Hypatia neurosymbolic scan: beam/native/src/lith_nif.zig#L1

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (9 occurrences, CWE-704)

Hypatia neurosymbolic scan: beam/native_rust/src/lib.rs#L1

[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676)

Hypatia neurosymbolic scan: test-suite.yml#L1

[hypatia] Workflow executes remote script directly (curl/wget piped to shell). Download, verify checksum/signature, then execute.

Hypatia neurosymbolic scan: zig-tests.yml#L1

[hypatia] Issue in zig-tests.yml

Hypatia neurosymbolic scan: test-suite.yml#L1

[hypatia] Issue in test-suite.yml

Hypatia neurosymbolic scan: test-suite.yml#L1

[hypatia] Issue in test-suite.yml

Hypatia neurosymbolic scan: test-suite.yml#L1

[hypatia] Issue in test-suite.yml

Hypatia neurosymbolic scan: test-suite.yml#L1

[hypatia] Issue in test-suite.yml

Hypatia neurosymbolic scan: labels.yml#L1

[hypatia] Issue in labels.yml

Hypatia neurosymbolic scan: label-triage.yml#L1

[hypatia] Issue in label-triage.yml

Hypatia neurosymbolic scan: ci.yml#L1

[hypatia] Issue in ci.yml

Hypatia neurosymbolic scan: ci.yml#L1

[hypatia] Issue in ci.yml

Hypatia neurosymbolic scan: ci.yml#L1

[hypatia] Issue in ci.yml

panic-attack assail

panic-attack binary not available — skipping assail

Patch Bridge CVE triage

panic-attack binary not available — skipping Patch Bridge

Artifacts

Produced during runtime

Name	Size	Digest
bridge-report	218 Bytes	`sha256:750e7048009f663dd3812df66e332c402d864b076c09fe722b37e5f21990d77b`
hypatia-findings	1.8 KB	`sha256:0414a4cb7dd07b87220bfe5dc8cf12223e832989031249a61e3734b7c607cb0e`
panic-attack-findings	171 Bytes	`sha256:78118b230f573aba9c9f6f66e587e97fbfc5453463f441a8f9517ad5e97da090`
unified-findings	2.07 KB	`sha256:9c8dc0a6bf55432921e3af93beaed23bf43370f6ac65fb72bfd3e6a11d52c98d`